[pve-devel] Block password change for @pve users

2020-02-07 Thread Frederico F. Siena
I created a group, user and role for the specific purpose of access in kiosk mode via spice using the script "/usr/share/doc/pve-manager/examples/spice-example-sh". It's working perfectly, but if a bad user intends to change the password set via the web gui, he can then, how to block the password c

Re: [pve-devel] [PATCH v3 docs 03/10] Overhaul Translation

2020-02-07 Thread Thomas Lamprecht
On 2/5/20 3:16 PM, Aaron Lauterer wrote: > improve phrasing > > Signed-off-by: Aaron Lauterer > --- > v2 -> v3: > rebased on current master > > v1 -> v2: > applied suggestion from oguz [0] > > [0] https://pve.proxmox.com/pipermail/pve-devel/2019-September/038952.html > > translation.adoc | 37

[pve-devel] applied: [PATCH v3 docs 01/10] Overhaul Getting Help

2020-02-07 Thread Thomas Lamprecht
On 2/5/20 3:16 PM, Aaron Lauterer wrote: > general overhaul of the documentation, improving phrasing, move open > source info > > Signed-off-by: Aaron Lauterer > --- > v2 -> v3: > rebased on current master > > v1 -> v2: > > feedback from thomas[0]: > * moved open source hint to mailing list for

[pve-devel] applied: [PATCH v3 docs 02/10] Overhaul How To Improve Docs

2020-02-07 Thread Thomas Lamprecht
On 2/5/20 3:16 PM, Aaron Lauterer wrote: > general overhauling, improve phrasing > > Signed-off-by: Aaron Lauterer > --- > > v2 -> v3: > rebased on current master > > v1 -> v2: > applied suggestion from oguz [0] > > [0] https://pve.proxmox.com/pipermail/pve-devel/2019-September/038952.html >

Re: [pve-devel] [PATCH v2 manager 3/3] fix #2559: vzdump: handle pigz blocksize property

2020-02-07 Thread Thomas Lamprecht
On 2/4/20 3:56 PM, Moayad Almalat wrote: > From: Moayad > > potentially improves backup speed. > > Signed-off-by: Moayad > --- > PVE/VZDump.pm | 7 ++- > 1 file changed, 6 insertions(+), 1 deletion(-) > > diff --git a/PVE/VZDump.pm b/PVE/VZDump.pm > index 0f04d4db..232f0550 100644 > --- a

Re: [pve-devel] [PATCH v2 manager 2/3] vzdump: handle pigz property string

2020-02-07 Thread Thomas Lamprecht
On 2/4/20 3:56 PM, Moayad Almalat wrote: > From: Moayad > > Signed-off-by: Moayad > --- > PVE/VZDump.pm | 8 ++-- > 1 file changed, 6 insertions(+), 2 deletions(-) > > diff --git a/PVE/VZDump.pm b/PVE/VZDump.pm > index 3caa7ab8..0f04d4db 100644 > --- a/PVE/VZDump.pm > +++ b/PVE/VZDump.pm >

Re: [pve-devel] [PATCH v2 guest-common 1/3] vzdump.conf: make pigz a property string

2020-02-07 Thread Thomas Lamprecht
On 2/4/20 3:56 PM, Moayad Almalat wrote: > From: Moayad > > and add blocksize property. > > Signed-off-by: Moayad > --- > PVE/VZDump/Common.pm | 26 ++ > 1 file changed, 22 insertions(+), 4 deletions(-) > > diff --git a/PVE/VZDump/Common.pm b/PVE/VZDump/Common.pm > ind

[pve-devel] applied: [PATCH v2 qemu-server 1/2] resize_vm: request new size from storage after resizing

2020-02-07 Thread Thomas Lamprecht
On 1/13/20 11:47 AM, Fabian Ebner wrote: > Because of alignment and rounding in the storage backend, the effective > size might not match the 'newsize' parameter we passed along. > > Signed-off-by: Fabian Ebner > --- > > Turns out that this happens in basically every storage backend that has > '

Re: [pve-devel] [PATCH qemu-server 1/1] Close #2443: qemu-server: add MTU option to virtio-net device

2020-02-07 Thread Thomas Lamprecht
On 2/3/20 6:29 AM, Alexandre DERUMIER wrote: > Hi, > sorry to bump this thread, but I'm seeing users requesting this on the forum, > and I think I'll need it too for vxlan setup, when users can't increase the > mtu on physical interfaces > (and so, need to reduce it in the vms) > > > >>> As far

Re: [pve-devel] libknet v1.14 released

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 1:18 PM, Alexandre DERUMIER wrote: > Hi, > > libknet 1.14 has been release recently, > https://github.com/kronosnet/kronosnet/releases/tag/v1.14 > > > fixing some bugs. > > > I had a bug recently with corosync3 (last pve version), > > after a host reboot, the corosync cluster has b

[pve-devel] libknet v1.14 released

2020-02-07 Thread Alexandre DERUMIER
Hi, libknet 1.14 has been release recently, https://github.com/kronosnet/kronosnet/releases/tag/v1.14 fixing some bugs. I had a bug recently with corosync3 (last pve version), after a host reboot, the corosync cluster has breakout after node have comeback. (some nodes don't see others rand

[pve-devel] applied-series: [PATCH pve-common 0/3] INotify: fix bridge check

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 12:40 PM, Alexandre Derumier wrote: > User have reported bugs with check mtu > https://forum.proxmox.com/threads/proxmox-bridge-mtu-issue.51148/#post-293265 > > I also find another bug with tagged interfaces in bridge ports > > > Alexandre Derumier (3): > INotify: fix mtu check && ad

[pve-devel] [PATCH pve-common 1/3] INotify: fix mtu check && add test

2020-02-07 Thread Alexandre Derumier
reverse the parent-child. (bridge-port is the parent) --- src/PVE/INotify.pm | 2 +- .../etc_network_interfaces/t.create_network.pl | 18 ++ 2 files changed, 19 insertions(+), 1 deletion(-) diff --git a/src/PVE/INotify.pm b/src/PVE/INotify.pm index 9bf

[pve-devel] [PATCH pve-common 3/3] INotify : check_bridge : fix bridge-ports with vlan tagged interface

2020-02-07 Thread Alexandre Derumier
Currently with strip vlan tag, that's wrong because mtu && others check are done the main interface. --- src/PVE/INotify.pm| 21 -- .../t.create_network.pl | 22 +-- 2 files changed, 34 insertions(+), 9 deletions(-)

[pve-devel] [PATCH pve-common 0/3] INotify: fix bridge check

2020-02-07 Thread Alexandre Derumier
User have reported bugs with check mtu https://forum.proxmox.com/threads/proxmox-bridge-mtu-issue.51148/#post-293265 I also find another bug with tagged interfaces in bridge ports Alexandre Derumier (3): INotify: fix mtu check && add test INotify: check bridge ip: add missing check if method

[pve-devel] [PATCH pve-common 2/3] INotify: check bridge ip: add missing check if method is not defined

2020-02-07 Thread Alexandre Derumier
--- src/PVE/INotify.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/PVE/INotify.pm b/src/PVE/INotify.pm index 6e7a78c..7becbde 100644 --- a/src/PVE/INotify.pm +++ b/src/PVE/INotify.pm @@ -1562,8 +1562,8 @@ sub __write_etc_network_interfaces { my $n =

[pve-devel] applied: [PATCH docs] pvecm: fix corosync link priority description

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 10:37 AM, Aaron Lauterer wrote: > The official man page fixed this in commit 0a323ff [0] to describe the > actual behaviour: higher knet_link_priority number equals to higher > priority > > [0] > https://github.com/corosync/corosync/commit/0a323ff2ed0f2aff9cb691072906e69cb96ed662 > > S

[pve-devel] applied: [PATCH ceph] Add patch for failing prerm scripts

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 11:55 AM, Dominic Jäger wrote: > Signed-off-by: Dominic Jäger > --- > ...12-Remove-failing-actions-from-prerm.patch | 164 ++ > patches/series| 1 + > 2 files changed, 165 insertions(+) > create mode 100644 patches/0012-Remove-failing-a

[pve-devel] [PATCH ceph] Add patch for failing prerm scripts

2020-02-07 Thread Dominic Jäger
Signed-off-by: Dominic Jäger --- ...12-Remove-failing-actions-from-prerm.patch | 164 ++ patches/series| 1 + 2 files changed, 165 insertions(+) create mode 100644 patches/0012-Remove-failing-actions-from-prerm.patch diff --git a/patches/0012-Re

Re: [pve-devel] [PATCH docs] pvecm: fix corosync link priority description

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 10:55 AM, Thomas Lamprecht wrote: > On 2/7/20 10:37 AM, Aaron Lauterer wrote: >> The official man page fixed this in commit 0a323ff [0] to describe the >> actual behaviour: higher knet_link_priority number equals to higher >> priority > > higher priority is used, yes, but lower value mea

Re: [pve-devel] [PATCH docs] pvecm: fix corosync link priority description

2020-02-07 Thread Thomas Lamprecht
On 2/7/20 10:37 AM, Aaron Lauterer wrote: > The official man page fixed this in commit 0a323ff [0] to describe the > actual behaviour: higher knet_link_priority number equals to higher > priority higher priority is used, yes, but lower value means higher priority... > > [0] > https://github.com

[pve-devel] [PATCH docs] pvecm: fix corosync link priority description

2020-02-07 Thread Aaron Lauterer
The official man page fixed this in commit 0a323ff [0] to describe the actual behaviour: higher knet_link_priority number equals to higher priority [0] https://github.com/corosync/corosync/commit/0a323ff2ed0f2aff9cb691072906e69cb96ed662 Signed-off-by: Aaron Lauterer --- pvecm.adoc | 4 ++-- 1

Re: [pve-devel] [PATCH pve-qemu] security patches for libslirp CVE-2020-8608

2020-02-07 Thread Thomas Lamprecht
On 2/6/20 3:25 PM, Oguz Bektas wrote: > original commits and email can be found here[0] > > A out-of-bounds heap buffer access issue was found in the SLiRP > networking implementation of the QEMU emulator. It occurs in tcp_emu() > routine while emulating IRC and other protocols due to unsafe usage